Access & Identity Management Administrator

STEFANINI SINGAPORE PTE. LTD.; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

STEFANINI SINGAPORE PTE. LTD. is seeking an Access & Identity Management (AIM) Administrator to manage user accounts, permissions and entitlements across Microsoft Active Directory, Exchange, UNIX, and cloud platforms. You will participate in system migrations and onboarding of new applications to AIM management.

The role requires strong knowledge of AD/Azure, Exchange, IAM systems, and 2FA solutions, with a focus on governance, documentation, and compliance within a global security program.

Qualifications

• Experience in user administration in Windows AD and Azure Entra ID.
• Experience granting NTFS permissions in Windows DFS environments.
• User admin tasks for in-house and third-party apps.
• Experience in Exchange Admin Center (ECP, EAC) mailbox & group management.
• Knowledge of enterprise IAM systems (e.g. SailPoint IdentityIQ, Okta).
• Experience with 2FA remote access solutions (RSA, Duo).
• Understanding of SSAE16/SOX audit requirements in IAM/Access governance.
• Familiarity with ticketing/workflow tools (ServiceNow, JIRA).
• Basic UNIX command-line familiarity.
• Basic PowerShell usage in Office 365 and on-prem Exchange.

Responsibilities

• Manage user accounts, permissions and entitlements across AD, Exchange, UNIX, Cloud, and 350+ apps.
• Maintain entitlements across the employee lifecycle (Joiners/Movers/Leavers).
• Lead project work on system migrations and onboarding new systems to AIM management.

Skills

Active Directory

Azure Entra ID

Exchange Admin

2FA Administration

PowerShell

Unix

ServiceNow

JIRA

RBAC IAM

Documentation

Communication

Tools

Okta

SailPoint

Job description

Job Description:

The Access & Identity Management (AIM) team is a critical component of Global Information Security and is responsible for controlling and maintaining secure access across the technology estate. The team ensures that all users have appropriate access to technology systems and resources within the Firm.

The AIM administrator is responsible for user administration functions across all technology platforms and applications, including:

• Managing user accounts, permissions and entitlements in Microsoft Active Directory, Exchange, UNIX, Cloud (Microsoft Azure, AWS, GCP), 350+ business applications and BlackRock’s state-of-the-art trading and asset management platform, Aladdin.
• Maintaining appropriate user entitlements throughout the employee lifecycle (Joiners/Movers/Leavers).
• Project work relating to system migrations and onboarding new systems to AIM management.

Knowledge/Experience:

• Experience performing user administration in a Windows Active Directory environment, and a Microsoft Azure Entra ID.
• Experience in granting NTFS permissions for folders/files in a Windows Distributed File System Environment.
• Experience performing user administration tasks for various in-house and third-party applications.
• Experience in Exchange administration Exchange Admin Center (both ECP, EAC): creating and maintaining mailboxes, distribution lists, contacts and public folders.
• Knowledge of enterprise-level Identity Management systems (e.g. SailPoint IdentityIQ, Okta).
• Experience administering 2FA remote access solutions (e.g RSA, Duo, etc)
• Knowledge of Information Security principles and ability to adhere to SSAE16 and SOX audit requirements pertaining to Identity & Access Management (Role-Based Access Control, access governance, detail-oriented, obtaining and documenting approvals, etc).
• Experience with ticketing/workflow management tools (e.g. ServiceNow, JIRA).
• Basic familiarity with UNIX command-line execution.
• Basic familiarity with PowerShell command in both Office 365 and on-prem Exchange.
• Strong written and verbal communication skills.
• Commitment to excellence and high standards; strong organizational skills; able to manage time, priorities and workload; provide documentation and accountability.